Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: LIJbPp9e4bCJrxiEhB7TqufE9XIYIwD0uNnx3edhde0=
Subject key identifier: E9:4E:CF:5E:4B:81:42:96:A4:9C:A1:F5:57:21:93:49:59:6B:9A:7D
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019A526316C494335229F05E2C3E603F4F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0174
Signing time: Wed 05 Nov 2025 05:00:16 +0000
Manifest this update: Wed 05 Nov 2025 05:00:16 +0000
Manifest next update: Thu 06 Nov 2025 05:00:16 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: 642ql/hUhlyBIDSaai3s34JPPhXKPnzOhYtvwCSiQrw=)
2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:16:c4:94:33:52:29:f0:5e:2c:3e:60:3f:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Nov 5 05:00:16 2025 GMT
Not After : Nov 6 05:00:16 2025 GMT
Subject: CN=e94ecf5e4b814296a49ca1f557219349596b9a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:46:00:a8:ab:30:b6:e8:33:78:e5:34:8d:
d5:eb:7c:aa:eb:f5:21:6f:de:af:6e:b3:ac:96:c3:
a5:1d:05:0d:f4:a8:73:f5:99:c5:37:86:3a:fb:3b:
a7:08:c5:a8:62:5a:7c:e3:e9:a5:ed:85:dd:c7:01:
dc:80:65:b0:6e:c3:a2:5e:9f:ab:ae:af:57:1a:77:
b5:20:32:8f:97:d8:8a:20:40:5a:17:7a:01:d0:f3:
e9:24:77:fe:ea:7d:0a:bc:36:d3:b3:48:bf:60:b0:
81:2f:0a:16:7d:78:a9:a1:80:f4:2b:27:83:07:92:
b5:6f:d3:0d:bc:ec:b9:38:d6:87:52:14:f8:ab:d4:
57:41:9a:48:6a:7e:2e:65:47:10:c9:15:54:c3:54:
6c:69:fc:10:04:c0:b8:06:c1:84:ad:38:21:56:e3:
4e:bf:5a:53:67:ff:1e:cc:94:91:f0:88:90:5d:b7:
6c:da:42:08:95:ec:1d:36:61:5a:92:60:a2:79:66:
94:d0:24:2b:b9:8a:01:ad:73:d1:95:28:28:bf:8e:
57:68:f4:96:27:79:9d:95:9c:e5:1b:a9:3c:01:3b:
fa:8b:88:06:8e:8d:fe:23:53:3b:d9:3c:f6:38:ef:
ca:d9:90:85:1b:3b:e2:cf:f5:96:7a:7e:06:f5:4f:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:CF:5E:4B:81:42:96:A4:9C:A1:F5:57:21:93:49:59:6B:9A:7D
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:98:f4:6c:71:82:e5:a2:81:b5:ec:e3:d0:f7:0c:0d:b0:95:
9e:97:67:9f:7f:48:0f:f0:9f:b5:15:f1:a3:fb:87:62:05:09:
55:1e:fa:18:37:9b:cd:c3:c1:2d:62:78:c3:52:6c:88:df:f1:
af:84:33:03:8a:c2:fb:e2:79:1d:c6:f5:16:4d:60:ec:1a:9d:
95:e0:d4:18:8f:a5:dc:46:a8:00:56:d9:9e:b7:e1:fc:f6:36:
d9:7c:30:f6:01:66:34:25:26:f5:cb:bd:3d:65:16:4b:f2:1c:
a5:a0:31:37:e5:67:31:0f:f9:e4:63:5d:85:5d:ab:b3:85:f6:
53:1a:e4:bd:38:a7:1a:d7:a8:b4:30:27:ec:d4:91:a9:50:c2:
ed:1e:72:e5:5f:62:8a:21:dd:15:c4:e5:2e:f7:5c:64:ce:0f:
05:b3:17:99:d1:41:cb:1a:17:7c:3c:e2:84:07:66:6f:d1:2d:
13:7c:ee:de:f9:cd:f6:8e:31:f4:3e:89:ff:2c:75:e2:6c:5a:
c4:f0:7e:7a:52:8a:73:71:ba:be:71:50:45:97:bc:ab:1d:96:
47:4b:e2:ed:b2:6b:f6:1f:6a:66:ba:58:8e:12:e0:da:51:69:
19:c9:fd:e0:83:06:3e:2b:fa:f0:05:b0:a7:a7:78:9e:c9:bc:
d3:8b:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:39:34 2025 by rpki-client